Privacy Policy

Effective Date: April 12, 2026 | Last Updated: April 12, 2026

This Privacy Policy ("Policy") describes how Mojoh Kitchen® ("We", "Us", or "Our") collects, uses, stores, and protects personal data obtained through the Website at www.mojohkitchen.com and through our WhatsApp ordering channel.

This Policy is published in compliance with the Information Technology Act, 2000 read with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and in anticipation of the requirements of the Digital Personal Data Protection Act, 2023 ("DPDPA") as and when operationalised.

11. Data We Collect

11.1 Data Collected via WhatsApp Orders When you initiate a WhatsApp order through the link on our Website, we may collect:

• Your name (as shared by you in the conversation);
• Your WhatsApp mobile number;
• Your order details and food preferences.

11.2 Data Collected via Third-Party Platforms Orders placed via Swiggy or Zomato are processed entirely on those platforms. Any personal data you provide on those platforms is governed by their respective privacy policies. Mojoh Kitchen receives only the information necessary to fulfil your order (e.g., your order summary and contact details for preparation).

11.3 Data Collected via Website Browsing Our Website is a static/server-rendered Next.js application hosted on Vercel. We do not operate independent cookies or tracking scripts. However, Vercel and your browser may collect standard server log data including:

• IP address;
• Browser type and version;
• Pages visited and time of access; and
• Referring URL.

This data is collected by Vercel (our hosting provider) and is governed by Vercel's Privacy Policy.

12. Purpose of Data Collection and Use

We collect and process personal data only for the following purposes:

• To receive, process, and fulfil your food orders;
• To communicate with you regarding your order, including confirmation, updates, and delivery;
• To respond to your queries or complaints; and
• To comply with applicable legal obligations, including FSSAI regulations and GST record-keeping requirements.

We do not use your personal data for unsolicited marketing communications without your explicit consent.

13. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to any third party. We may share your data only in the following limited circumstances:

• With Swiggy or Zomato to the extent necessary to fulfil a platform-based order;
• With government or regulatory authorities if required by law, court order, or regulatory direction; or
• With our FSSAI-licensed kitchen staff solely for the purpose of order preparation.

14. Data Retention

Personal data collected via WhatsApp is retained only for the duration necessary to fulfil your order and for a reasonable period thereafter for grievance redressal and legal compliance. We do not maintain structured customer databases for WhatsApp orders beyond operational necessity.

15. Data Security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

16. Your Rights

Under applicable Indian law, including the DPDPA, 2023 (upon operationalisation), you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete personal data;
• Withdraw consent for processing, where processing is based on consent;
• Seek erasure of your personal data, subject to legal retention obligations; and
• Lodge a grievance with the Data Protection Board of India (once constituted).

To exercise any of the above rights, please contact us at officialmojohkitchen@gmail.com.

17. Children's Privacy

This Website is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us personal data, please contact us immediately and we will take prompt steps to delete such data.

18. Grievance Officer

In accordance with Rule 5(9) of the SPDI Rules and Section 13 of the Information Technology Act, 2000, the following person is designated as our Grievance Officer:

Grievances will be acknowledged within 24 hours and resolved within 30 days of receipt.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the beginning of this document reflects the most recent revision. We encourage you to review this Policy periodically.

20. Governing Law

This Privacy Policy is governed by the laws of the Republic of India. Disputes shall be subject to the exclusive jurisdiction of competent courts at Ahmedabad, Gujarat.